Skip to content

Improve dashboard layout, global typography, and sidebar icons #128

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
mdanassaif wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Improve dashboard layout, global typography, and sidebar icons #128

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 12 additions & 5 deletions Views/Home/Dashboard.cshtml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,13 @@
<style>
img.logo {
width: 200px;
display: block;
margin: 0 auto 12px auto; /* center the logo on its own line */
}

.hero-title {
margin-top: 8px;
margin-bottom: 8px;
}

.sebtn {
Expand All @@ -18,16 +25,16 @@
</style>

<div class="text-center">
<h1 class="display-4">
<img src="/AspGoatLogo.png" class="logo"> Welcome to AspGoat
</h1>
<p class="lead">An intentionally vulnerable ASP.NET Core app for learning web security.</p>
<img src="~/AspGoatLogo.png" class="logo" alt="AspGoat logo" />
<h1 class="display-4 hero-title">Welcome to AspGoat</h1>
<p class="lead mb-2">An intentionally vulnerable ASP.NET Core app for learning web security.</p>

<hr style="margin: 30px auto; width: 60%;" />

<div style="max-width: 700px; margin: auto; font-size: 1.05rem;">
<div class="text-start" style="max-width: 700px; margin: auto; font-size: 1.05rem;">
<p><strong>Purpose:</strong> Practice finding and fixing common web vulnerabilities in a safe environment.</p>


<p><strong>Includes:</strong></p>
<ul class="text-start" style="margin-left: 20px;">
<li>SQL Injection</li>
Expand Down
126 changes: 105 additions & 21 deletions Views/Shared/_Layout.cshtml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,14 +9,25 @@
<title>@ViewData["Title"] - AspGoat</title>
<link href="https://cdn.jsdelivr.net/npm/[email protected]/dist/css/bootstrap.min.css" rel="stylesheet" />
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css" />
<link href="https://fonts.googleapis.com/css2?family=Source+Code+Pro:wght@400;600&family=Fira+Code&family=Space+Mono&display=swap" rel="stylesheet">
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&family=Source+Code+Pro:wght@400;600&family=Fira+Code&family=Space+Mono&display=swap" rel="stylesheet">
<link rel="stylesheet" href="~/css/site.css" asp-append-version="true" />
<style>
html, body {
margin: 0;
padding: 0;
}

body {
font-family: 'Inter', system-ui, -apple-system, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, 'Noto Sans', sans-serif;
line-height: 1.6;
color: #222;
}

code, pre, kbd, samp {
font-family: 'Fira Code', 'Source Code Pro', 'Space Mono', ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, 'Liberation Mono', 'Courier New', monospace;
font-size: 0.95em;
}

.sidebar {
position: fixed;
top: 0;
Expand Down Expand Up @@ -70,31 +81,104 @@
.sidebar a:hover {
background-color: #3b1ca6; /* darker hover */
}

.sidebar a .nav-ico {
width: 16px;
height: 16px;
margin-right: 8px;
vertical-align: -2px;
fill: #ffffff;
opacity: 0.9;
}

.sidebar a:hover .nav-ico {
opacity: 1;
}
</style>
</head>
<body>
<div class="sidebar">
<h2>AspGoat</h2>
<a asp-controller="Home" asp-action="Dashboard"><i class="fas fa-home"></i> Home</a>
<a asp-controller="Home" asp-action="SqlInjection">🐞 Sql Injection</a>
<a asp-controller="Home" asp-action="BrokenAuthentication">🐞 Broken Authentication</a>
<a asp-controller="Home" asp-action="InformationDisclosure">🐞 Information Disclosure</a>
<a asp-controller="Home" asp-action="XXE">🐞 XML External Entities (XXE)</a>
<a asp-controller="Home" asp-action="InsecureDirectObjectReference">🐞 Insecure Direct Object Reference (IDOR)</a>
<a asp-controller="Home" asp-action="OpenRedirect">🐞 Open Redirect</a>
<a asp-controller="Home" asp-action="ReflectedXSS">🐞 Reflected XSS</a>
<a asp-controller="Home" asp-action="StoredXSS">🐞 Stored XSS</a>
<a asp-controller="Home" asp-action="DomXSS">🐞 DOM XSS</a>
<a asp-controller="Home" asp-action="InsecureDeserialization">🐞 Insecure Deserialization</a>
<a asp-controller="Home" asp-action="PrototypePollution">🐞 Prototype Pollution</a>
<a asp-controller="Home" asp-action="LFI">🐞 Local File Inclusion (LFI)</a>
<a asp-controller="Home" asp-action="FileUpload">🐞 Unrestricted File Upload (File Overwrite)</a>
<a asp-controller="Home" asp-action="CommandInjection">🐞 Command Injection (RCE)</a>
<a asp-controller="Home" asp-action="CSRF">🐞 Cross Site Request Forgery (CSRF)</a>
<a asp-controller="Home" asp-action="SSRF">🐞 Server Side Request Forgery (SSRF)</a>
<a asp-controller="Home" asp-action="CachePoisoning">🐞 Cache Poisoning</a>
<a asp-controller="Home" asp-action="SSTI">🐞 Server Side Template Injection (RCE)</a>
<a asp-controller="Home" asp-action="LLM_Vulnerabilities">🐞 AI / LLM Vulnerabilities</a>
<a asp-controller="Home" asp-action="Dashboard">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M3 10l9-7 9 7v10a1 1 0 0 1-1 1h-6v-6h-4v6H4a1 1 0 0 1-1-1V10z"/></svg>
Home
</a>
<a asp-controller="Home" asp-action="SqlInjection">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 2l9 5v5c0 5-4 8-9 10C7 20 3 17 3 12V7l9-5z"/></svg>
Sql Injection
</a>
<a asp-controller="Home" asp-action="BrokenAuthentication">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 2l9 5v5c0 5-4 8-9 10C7 20 3 17 3 12V7l9-5z"/></svg>
Broken Authentication
</a>
<a asp-controller="Home" asp-action="InformationDisclosure">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 2l9 5v5c0 5-4 8-9 10C7 20 3 17 3 12V7l9-5z"/></svg>
Information Disclosure
</a>
<a asp-controller="Home" asp-action="XXE">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 2l9 5v5c0 5-4 8-9 10C7 20 3 17 3 12V7l9-5z"/></svg>
XML External Entities (XXE)
</a>
<a asp-controller="Home" asp-action="InsecureDirectObjectReference">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 2l9 5v5c0 5-4 8-9 10C7 20 3 17 3 12V7l9-5z"/></svg>
Insecure Direct Object Reference (IDOR)
</a>
<a asp-controller="Home" asp-action="OpenRedirect">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 2l9 5v5c0 5-4 8-9 10C7 20 3 17 3 12V7l9-5z"/></svg>
Open Redirect
</a>
<a asp-controller="Home" asp-action="ReflectedXSS">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 2l9 5v5c0 5-4 8-9 10C7 20 3 17 3 12V7l9-5z"/></svg>
Reflected XSS
</a>
<a asp-controller="Home" asp-action="StoredXSS">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 2l9 5v5c0 5-4 8-9 10C7 20 3 17 3 12V7l9-5z"/></svg>
Stored XSS
</a>
<a asp-controller="Home" asp-action="DomXSS">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 2l9 5v5c0 5-4 8-9 10C7 20 3 17 3 12V7l9-5z"/></svg>
DOM XSS
</a>
<a asp-controller="Home" asp-action="InsecureDeserialization">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 2l9 5v5c0 5-4 8-9 10C7 20 3 17 3 12V7l9-5z"/></svg>
Insecure Deserialization
</a>
<a asp-controller="Home" asp-action="PrototypePollution">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 2l9 5v5c0 5-4 8-9 10C7 20 3 17 3 12V7l9-5z"/></svg>
Prototype Pollution
</a>
<a asp-controller="Home" asp-action="LFI">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 2l9 5v5c0 5-4 8-9 10C7 20 3 17 3 12V7l9-5z"/></svg>
Local File Inclusion (LFI)
</a>
<a asp-controller="Home" asp-action="FileUpload">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M4 4h16v16H4zM9 13h6v2H9zM11 7h2v6h-2z"/></svg>
Unrestricted File Upload (File Overwrite)
</a>
<a asp-controller="Home" asp-action="CommandInjection">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M3 5h18v14H3zM6 9h5v2H6zM6 13h8v2H6z"/></svg>
Command Injection (RCE)
</a>
<a asp-controller="Home" asp-action="CSRF">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 2l9 5v5c0 5-4 8-9 10C7 20 3 17 3 12V7l9-5z"/></svg>
Cross Site Request Forgery (CSRF)
</a>
<a asp-controller="Home" asp-action="SSRF">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 2l9 5v5c0 5-4 8-9 10C7 20 3 17 3 12V7l9-5z"/></svg>
Server Side Request Forgery (SSRF)
</a>
<a asp-controller="Home" asp-action="CachePoisoning">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 2l9 5v5c0 5-4 8-9 10C7 20 3 17 3 12V7l9-5z"/></svg>
Cache Poisoning
</a>
<a asp-controller="Home" asp-action="SSTI">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 2l9 5v5c0 5-4 8-9 10C7 20 3 17 3 12V7l9-5z"/></svg>
Server Side Template Injection (RCE)
</a>
<a asp-controller="Home" asp-action="LLM_Vulnerabilities">
<svg class="nav-ico" viewBox="0 0 24 24" aria-hidden="true"><path d="M12 2l9 5v5c0 5-4 8-9 10C7 20 3 17 3 12V7l9-5z"/></svg>
AI / LLM Vulnerabilities
</a>
</div>

<div class="topbar">
Expand Down